CVE-2026-21721

This repository contains a functional Python exploit for CVE-2026-21721, which targets a privilege escalation vulnerability in Grafana. The exploit authenticates with valid credentials, reads dashboard permissions, and escalates the user's permissions to Admin (permission=4) on all dashboards.

This exploit PoC demonstrates a privilege escalation vulnerability in Grafana (CVE-2026-21721) by escalating an Editor account to Admin permissions on all dashboards. It authenticates, reads current permissions, and applies Admin (permission=4) to the attacker's user ID.